Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8383a7dd-7fa7-3c34-a5a5-7f95c13b4061.roa
File:                     8383a7dd-7fa7-3c34-a5a5-7f95c13b4061.roa (raw, json)
Hash identifier:          kHmdqK2VqCcuD270X+Vnby+n3yutnzxnEoKSkeBh28c=
Subject key identifier:   6B:7C:CD:DF:0D:57:39:E5:FD:4A:A1:6D:A4:AD:95:08:47:EB:9D:72
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285849F1801E3F74525C56ADD0C5D0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8383a7dd-7fa7-3c34-a5a5-7f95c13b4061.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     397236
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:80:1e:3f:74:52:5c:56:ad:d0:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=5001ddda-b652-47b4-9532-b3a999fd6080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4f:b3:e5:a4:4b:e4:71:d2:62:57:36:3e:84:
                    d1:45:65:4f:6f:79:3a:bd:c3:f3:9d:e1:ce:1d:d3:
                    80:cd:ef:54:49:43:75:72:46:a8:62:23:43:d5:fe:
                    46:84:ab:9b:e2:4d:62:f6:19:08:83:eb:cb:ef:6d:
                    91:98:cc:48:1d:c9:f1:cf:af:8b:f5:fe:40:1a:cf:
                    28:a1:cf:b1:b7:70:a7:4a:29:83:96:38:6f:bd:7f:
                    e0:19:5e:3b:f0:83:21:df:05:f0:a5:21:53:2b:6e:
                    2c:c3:c3:52:96:83:cf:59:3a:9e:c5:15:fc:71:3c:
                    a1:83:e7:0e:df:e9:e5:8d:49:09:ad:e3:26:48:8c:
                    b4:1d:91:90:68:70:d7:31:6a:fa:07:cb:b2:d1:a2:
                    8c:7f:e1:48:d3:40:9e:d5:3f:2c:04:89:52:c2:54:
                    3a:b0:30:ec:cf:54:de:17:69:89:0d:2b:c0:44:3b:
                    9b:d0:db:8e:3b:3a:4a:eb:a4:60:b5:2f:72:bc:e3:
                    35:50:41:a4:11:9c:df:9e:06:d1:30:b3:b0:65:1b:
                    25:94:96:0b:da:62:6d:99:83:2b:3f:94:85:9c:8b:
                    b2:41:ec:d7:a2:a6:d4:69:46:a0:ac:f5:4e:9f:45:
                    95:11:18:05:14:25:ef:60:f0:c7:24:1f:2e:fd:d5:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7C:CD:DF:0D:57:39:E5:FD:4A:A1:6D:A4:AD:95:08:47:EB:9D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8383a7dd-7fa7-3c34-a5a5-7f95c13b4061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3e:9c:20:96:8b:30:24:be:43:72:89:03:36:41:93:36:fd:
         52:e1:32:7d:0c:29:b6:bd:1d:35:29:2c:5e:6a:d3:36:a2:b1:
         e5:82:17:1d:cf:15:52:4d:b1:df:f3:6f:c6:3e:68:57:2b:88:
         93:d8:6a:8a:49:25:6f:ae:7d:66:f8:0f:a8:9b:48:eb:4b:d3:
         78:a1:91:b2:a2:a2:78:7a:79:d2:7e:13:a3:eb:75:07:e9:40:
         47:43:b7:d7:63:6f:ee:a7:66:8c:25:ba:c2:c4:ff:ff:bb:32:
         e4:fb:31:d7:31:d3:7c:de:41:ab:b1:db:49:15:c5:6c:60:70:
         31:c8:18:9d:9c:16:2c:3c:e9:5e:7f:d9:64:62:23:96:d9:41:
         09:31:b4:c0:c7:a4:5d:f8:8c:44:51:2b:ed:df:78:61:1b:95:
         1f:3f:2b:52:66:d1:7f:18:dd:5a:b8:cc:be:52:8e:3b:0b:23:
         7c:26:ba:8a:f7:78:88:22:37:32:12:82:e4:7e:7f:79:25:2b:
         84:5b:d5:4b:76:7b:72:a7:e8:6c:84:2a:a2:48:76:37:97:5e:
         af:51:86:0f:f6:8e:63:f4:9c:4a:0c:6a:5c:cd:92:ed:f7:62:
         c9:c0:90:78:da:77:5b:18:41:f8:7e:ec:ad:56:25:75:83:e8:
         8a:fd:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:57 2025 by rpki-client